9/15/22, 12:47 PM AZ-900 Exam –Free Actual Q&As, Page 1 | ExamTopics
upvoted 6 times
aphex 10 months, 4 weeks ago
Wise man speaks truth, cannot agree more with you! Overcomplicating simple things is the MS way.
upvoted 17 times
Maxim_aurl 2 years ago
Security recommendation on threats and vulnerability not AD related configuration recommendations will be part of Advisor
upvoted 5 times
Piiri565 2 years, 1 month ago
Yeah, right even I think the same.
upvoted 2 times
Moon Highly Voted 2 years,9 months ago
Security recommendation does not cover the Active Directory, as it is upto the Customer to provision a user or not through AD.
Similarly Network security, Advisor can recommend to close some ports, but not "HOW to configure"!!
upvoted 29 times
roanbaga 2 years, 5 months ago
But recommend close some ports, Isn't recommedation security?
upvoted 6 times
TruptiJogi Most Recent 1 weekago
Yes, Yes, No
upvoted 1 times
CollabGuy 2 weeks, 2 days ago
For me this is aYES to all of the questions.
Azure Advisor also pulls recommendations from Microsoft Defender for Cloud: "Azure Advisor also includes your recommendations from
Microsoft Defender for Cloud which may include recommendations for additional resource types." (https://docs.microsoft.com/en-
us/azure/advisor/advisor-overview?source=recommendations)
1) https://docs.microsoft.com/en-us/azure/defender-for-cloud/features-paas and there is written "**Azure Active Directory (Azure AD)
recommendations are available only for subscriptions with enhanced security features enabled". So it means that it is available.
An example of such is the recommendation: "Accounts with owner permissions on Azure resources should be MFA enabled".
2) I didn't see many questions regarding this, so I think we all agree it's a YES.
3) For example, security advisor will tell you to enable just-in-time access control to protect your VM from internet-based brute-force
attacks on the management ports. It will provide links on how to do it on NSG or AZFW. Or you can click "Fix".
upvoted 1 times
slayerdrum 3 weeks, 6 days ago
From what I can see in Azure Portal, Azure Advisor does provide you with recommendations on security (and other things). This can also
be found here: https://docs.microsoft.com/en-us/azure/advisor/advisor-security-recommendations.
However, I can't find anything related to Azure Activate Directory. So I'd say "NO" is the correct answer.
upvoted 1 times
MaikyCR28 1 month,2 weeks ago
NYN.
https://docs.microsoft.com/en-us/azure/advisor/advisor-overview It doesn't say anything about Active Directory.
upvoted 1 times
Tbag 3 months ago
Azure Advisor analyzes your configurations and usage telemetry and offers personalized, actionable recommendations to help you
optimize your Azure resources for reliability, security, operational excellence, performance, and cost. I say another grey area question
upvoted 1 times
JustSignalingVirtues 3 months, 2 weeks ago
AD Directory environment for the most part is the responsibility of MS. Not sure if any recommendations will be provided to tenants.
upvoted 1 times
tacobear 6 months ago
it was on exam on 03/12/2022.
upvoted 4 times
SiDoCiOuS 6 months,1 week ago
Was on exam 11/03/2022. Answer is good!
upvoted 5 times
rrcool 6 months,2 weeks ago
Was on exam 26/02/2022
upvoted 3 times
babufrik 6 months, 3 weeks ago
N-Y-N
Azure Advisor analyzes deployed Azure resources and makes recommendations based
on best practices to optimize Azure deployments
Reliability
•Security
•Performance
•Cost
•Operational Excellence
Best Practices ... not "specific how to" about specific customer problems"
upvoted 4 times
VIP_G 5 months, 2 weeks ago
Actually, the reason the 1st one is No is because of the explanation given. Azure Advisor does not include Azure AD. Azure Advisor gives
recommendations on Cost, Operational Excellence, Performance, Security, and HA on subscriptions, resource groups, or services (VMs,
DB, App services, etc)
upvoted 2 times
SSB112 7 months, 4 weeks ago
Advisor provides recommendations for Application Gateway, App Services, availability sets, Azure Cache, Azure Data Factory, Azure
Database for MySQL, Azure Database for PostgreSQL, Azure Database for MariaDB, Azure ExpressRoute, Azure Cosmos DB, Azure public
IP addresses, Azure Synapse Analytics, SQL servers, storage accounts, Traffic Manager profiles, and virtual machines. It does not cover AD.
upvoted 1 times
ABarrios 7 months, 4 weeks ago
Igot this question in the exam 20/01/2022
upvoted 2 times
arjaycee 8 months, 1 weekago
https://www.examtopics.com/exams/microsoft/az-900/custom-view/ 314/598